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(54) Apparatus for testing base stations and mobile terminals of personal communications 
systems 



(57) An apparatus (EM) is descrit)ed lor testing 
base stations (RFP1 ... RFPh) and mobile terminals 
(TM1 ... TMI^ of personal communications systems, 
including DECT systems, whose base stations (RFP1 ... 
RFPh) provide mobile terminals (TM1 ... TMk) with radio 
access to a telecommunications network. The appara- 
tus (EM) is an autonomous structure able to emulate a 
switching exchange featuring radio access and it can be 
constructed in portable form for conducting field tests. 
An interna! control device (MP) contains the programs 



required for canrying out functional and traffic tests and 
tests of interworking with the mobile terminals and 
presents an operating system which creates the proc- 
esses required by the tests, manages them for conduct- 
ing the tests on a plurality of simultaneous 
communications and manages the information flow 
among the processes for displaying on and storing into 
an external control unit (PC) information about the exe- 
cution of the tests. 
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Description 

The present invention relates to personal communi- 
cations systems, and in particular its object is to provide 
an apparatus for testing base stations and mobile termi- 
nals of such systems. 

Preferably, the invention is employed to conduct 
tests on the Radio Fixed Part (RFP) and on the mobile 
terminals of a DECT (Digital European Cordless Tele- 
communications) system, i. e. a system based on the 
homonymous European standard, and the description 
which follows shall be made with particular reference to 
this preferred application. 

As is well known, the DECT system Is a system for 
radio access to telecommunications networks and is 
destined to allow communications with mobile terminals 
in areas with high traffic density. In a system of this kind 
the mobile terminals (portable radio transceivers) com- 
municate with a base station, connected in turn to a 
public or private network tasked with a certain number 
of functions, such as switching. Each base station con- 
trols an area (cell) of limited size, for instance with a 
radius of a few hundred meters, and therefore the sys- 
tem is of particular interest for communications in an 
urban environment or even irujoors, e. g. to provide a 
communications system for a company (cordless PABX, 
cordless Local Area Network etc.). The essential char- 
acteristics and some possible applications of the DECT 
system are describisd for example in the papers The 
New DECT Standard for Cordless Communications", by 
H. van der HoeK Telecommunications, February 1993. 
pp. 77 ff., "DECT - Cordless Functionality in New Gen- 
eration Alcatel PABX's", by V. Werbus et ai. Electrical 
Communications, 2"^ Quarter 1993, pp. 172 ff., as well 
as in ETSI standards. 

During testing and validation or qualification of the 
base stations and of the mobile terminals (i. e. when 
checking the apparatus for compliance with the opera- 
tor's specifications), functional tests, traffic tests and 
interworking tests with the mobile terminals shall have 
to be performed. 

Amongst functional tests, the following can be men- 
tioned: 

telecommunications tests, i. e. tests on the handling 

of incoming and outgoing calls; 

tests on mobility management functions, such as 

registration of the terminal or user position, paging 

etc; 

tests on security management functions, such as 
authentication of the terminal, of the user or of the 
network, encryption, etc.; 

tests on activation of the physical carrier for con- 
nection to the base station; 
tests on base station operation and maintenance, 
such as tests on set up, operating state manage- 
ment, loading of updated software configurations, 
statistics, measurements; 



tests on call transfer (handover) between two base 
stations or inside the same cell. 

Traffic tests are normally telecommunications and 

5 mobility management functional tests, but performed on 
multiple calls simultaneously. 

Lastly, tests of interworking with mobile terminals 
are aimed at verifying that a base station properly co- 
operates with terminals by different manufacturers and 

10 are based on the telecommunications and the mobility 
and security management functional tests performed on 
the base station. 

Apparatuses for conducting such tests on base sta- 
tions of the GSM mobile telephony system are already 

IS known in the art. However, these apparatuses cannot 
be used for tests on a personal communications system 
such as the DECT system, owing to the different nature 
of the two systems (DECT system is a system providing 
radio access to a telecommunications network, 

20 whereas GSM system is a complete network) and to the 
diversity of the standards governing them arxi of the 
protocols according to which they operate. For this rea- 
son it is also inconceivable to transform the procedures 
according to which the tests are to be conducted so that 

25 the known apparatuses can be used for tiie DECT sys- 
tem as well. 

According to the present invention, an apparatus 
specifically conceived for conducting tests on the radio 
fixed part and on the mobile terminals of a DECT or 

30 Similar radio access system is instead provided. The 
invention can be constructed in portable fbrm. for per- 
forming field tests; it allows monitoring the results, with 
e/ent tracing, storage on file and printing capabilities; it 
is highly flexible, both to allow tests on non standardised 

35 functions and/or on apparatuses by different manufac- 
turers and/or according to specifications by different 
operators, and to provide for the possibility of introduc- 
ing new types of tests. 

The apparatus according to the invention, arranged 

40 to emulate a switching exchange featuring radio access, 
comprises: 

first interface and management devices, for con- 
necting the test apparatus to a plurality of base sta- 
45 tions and terminals of a telecommunications 
network and for managing the respective connec- 
tions; 

switching devices connected to said first interface 
and management devices, for switching test corn- 
so munications coming from the base stations or 
directed thereto; 

second interface and management devices, for 
connecting the apparatus to an external control 
device and for managing that connection; 
55 - an internal control device that: presents a bus to 
which means that in the first interface arxi manage- 
ment devices are tasked with mar^ging tiie con- 
nections between the apparatus and th base 
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Stations and the network terminals, the switching 
devices and the second interface and management 
devices are connected; stores the programs 
required for conducting finctional tests, traffic tests 
and tests of interworking with the mobile terminals: 
and presents an operating system which creates 
the processes required by the tests, manages them 
for conducting the tests on a plurality of simultane- 
ous communications and manages the information 
flow among the processes for the display on and 
the storage into the external control device of infor- 
nnation about the development of the tests; 
the external control device, which provides the 
internal control device with information about the 
specific type of base station and/or terminal con- 
nected to the apparatus and with test parameters, 
programs the test modes and supervises the exe- 
cution of the tests. 

For additional clarification, reference is made to the 
enclosed drawings. In which: 

Figure 1 is a general block diagram of an apparatus 
for performing tests on a base station and on 
mobile terminals of a DECT system; 
Figure 2 is a block diagram of the emulator of a 
switching exchange featuring DECT radio access; 
Figure 3 is a diagram of the levels of a protocol for 
communication between the emulator ar>d the base 
stations and the terminals, provided by way of 
example; 

Figures 4A - 4B constitute, together, a flow chart of 
the operations of the operating system of the emu- 
lator; 

Figure 5 is a state diagram of a generic process; 
Figures 6 and 7 are SDL diagrams of two proc- 
esses. 

In Figure 1. references RFP1 ... RFPh indicate a 
group of base stations of a personal comrmjnications 
system (specifically a DECT system), which serve a 
certain number of mobile terminals TM1 ... TMk. The 
base stations RFPl ... RFPh can be connected through 
respective lines 1-1 ... 1h to a unit EM (hereafter called 
emulator) which emulates a switching exchange featur- 
ing DECT radio access, i. e. a unit capable of establish- 
ing the connections between the mobile terminals and 
the users of a telecommunications network to which the 
base stations are connected. By way of non-limiting 
example, an embodiment of the emulator EM shall be 
descrbed below for the case in which the switching 
exchange to be emulated is a switching exchange of an 
ISDN networK and therefore EM shall be connected, 
through lines 2-1 ... 2n. to a certain number of ISDN ter- 
minals TF1 ... TFn (hereinafter referred to also as 'tele- 
phones'). The connection of multiple base stations to 
the emulator EM allows performing tests on inter-cell 
handover. 



The emulator EM is also associated with a personal 
computer PC or equivalent device for controlling the 
enrujiator, monitoring test execution and storing the 
results for SLt>sequent off-line processing. Obviously, if 

5 the apparatus is destined to perform field tests, the 
computer PC should be a portable computer. Through 
the personal computer, an operator shall be able to con- 
figure the parameters for the specific test to be per- 
formed, the execution procedures (complete or step by 

10 step test), the test monitoring procedures. For monitor- 
ing, the emulator could also be connected to a local 
monitor. The connection with the personal computer PC 
or other device occurs via a serial line 3. The emulator 
EM can also be equipped with a handset MT. which rep- 

15 resents a user of the telecommunications network and 
which, in the case of portable apparatus, can be more 
conveniently handled than telephones TF1 ... TFn. In 
this case the program of the personal computer PC 
shall be such as to emulate the telephone keyboard. 

20 The handset MT can be used in any case in addition to 
the ISDN telephones TF1 ... TFn. 

TTie emulator EM constitutes the subject matter of 
the invention and K shall be descrbed in greater detail 
with reference to Figure 2. 

25 Therein it can be seen that the emulator EM func- 
tionally comprises: 

devices, indicated in their entirety a^R. interfacing 
the emulator with the base stations ^P1 RFPh; 
30 ' devices. Indicated in their entirety a^lF. interfacing 
the emulator with the ISDN terminals^TFI ... TFm; 
devices ILS for managing the connection with the 
personal computer PC; 

devices HD for managing the connection between 
35 the emulator EM on one side and the base stations 

and the ISDN terminals on the other, through the 

interfaces IR, IF; 

devices TA for voice transcoding; 

devices SW for voice switching and for managing 
40 the buses connecting the devices themselves with 

the interfaces IR, IF; 

devices CK for generating timing signals for devices 
SW.TA, I Rand IF; 

a microprocessor MP. to whose bus are connected 
45 the devices SW, HD, ILS. CK. IF and IR. 

In an embodiment conadered by way of example, 
the devices IR and IF comprise U and S ISDN inter- 
faces, indicated respectively as lU. IS, which manage 

so the physical level of the communication protocol, and 
devices for remote power supply and line protection 
PW1 (for the connection lines with the radio stations) 
and PW2 (for the connection lines with the ISDN termi- 
nals). The level 2 of the protocol is managed by the 

55 devices HD, which conrprise a group of HDLC (High- 
level Data Link Control) controllers. In the drawing, the 
block HD has been shown subdivided into the two parts 
HDU. HDS destined to control signalling towards the 
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base stations RFP and the telephones TF. respectively. 
The interfaces lU and IS and the HDLC controllers are 
devices well known in the art and their detailed descrip- 
tion is not necessary here. 

In particular, in this embodiment, the emulator EM 
has been equipped with four Interfaces lU and eight 
interfaces IS. each requiring a controller HDU. HDS. 
The components PEB2091 and PEB2081 produced by 
Siemens were used as interfaces lU, IS respectively, 
and components PEB2075. also by Siemens, were 
used as controllers HDU. HDS. each component includ- 
ing four controllers. 

In the specific case of the component indicated 
above, each interface lU Is able to manage four full- 
duplex channels (i. e. four bi-directional calls), conveyed 
onto a single output telephone loop, and it presents four 
output loops: of these, one or two can be used for trans- 
porting the aforesaid channels, according to the needs 
of the base stations; the same loop(s) Is (are) used, 
together with the other ones, for remote power supply 
As a consequence, the interfaces lU allow connecting 
the emulator to two base stations able to manage eight 
channels each and to four base stations each managing 
four channels. The eight interfaces IS instead allow con- 
nection to an equal number of telephones TF1 ... TFm. 
so that tip to eight active channels can be considered in 
traffic tests. With four Interfaces lU as stated above it will 
also be possible to conduct tests for handover from a 
base station to another. 

The interfaces lU. IS are connected to the control- 
lers HDU. HDS and to dialogue control devices (which 
shall be described farther on) present in SW. The con- 
nection is accorrplished by means of respective buses 
which. In the hypothesis of using as interfaces IS, tU the 
aforesaid components, constitute interfaces known with 
the acronym lOM-2. The aforesaid buses comprise a 
pair of data lines (respectively for reception and trans- 
mission) and two lines for the synchronisation signals. 
The transmission, which is essentially similar to a PCM 
transmission, is organised in 125 ^s frames and each 
channel of the IOM-2 frame comprises 32 bits related 
to: 

two 64 kbit/s channels, named channels B1 and B2. 
one of which, depending on the programming per- 
formed by the operator, is dedicated to voice; 
a monitor channel utilised to transfer programming 
information between the functional block perform- 
ing the functions of the level 1 of the protocol (inter- 
faces IS. lU) and the level 2 controller (blocks HDS. 
HDU); 

a 16 kbit/s signalling channel (channel D); 
four •command/irKlication'' bits to manage level 1 
functions (activation/deactivation and possible 
checks) by the level 2 controller (HDU or HDS); 
two bits. MR and MX. utilised to manage the moni- 
toring channel. 



The remote power supply devices PW1 . P W2 com- 
prise a power supply unit for each of the telephones TF 
and of the radio stations RFP. with output current/power 
characteristics which depend on the particular station 
5 being tested and on the type of network t which the 
radio stations provide access. These devices are wholly 
conventional and the person skilled in the art has no 
problem in choosing the best suited power supply unit 
for the type of network and station involved in the test. 
10 The devices PW1 . P W2 also comprise a digital interface 
(in practice a register) through which the individual 
power supply units can be enabled/disabled by means 
of the program according to the configuration required 
by the specific test, determined by the operator. 
15 The audio transcoding devices TA must provide for 
the conversion of the audio signals from the 64 kbrt/s 
PCM format, required by the ISDN specifications, into 
the 32 kbit/s ADPCM format used in the DECT part, and 
vice versa. Devices which perform these functions are 
20 commercially available. In the described embodiment, 
circuits MC1 453532 by Motorola have been used. 

The switching devices SW must perform the actual 
switching function (block DSC) in addition to controlling 
the buses providing connection with the interfaces IS. lU 
25 (block PIC). Although the drawing shows two distinct 
blocks to indicate the dual function, single components 
able to perform t>oth functions are commercially availa- 
ble. An example is the circuit PEB2055 by Siemens. 
The inputs/outputs of the devices SW are also con- 
30 nected to the audio transcoding devices TA. 

The devices SW can comprise an additional unit 
(incorporated for the sake of drawing simplicity into the 
block DSC) destined to combine voice signals pertain- 
ing to several communications when the system being 
35 tested provides for the conference service. A da^ice 
with these functions is also commercially available in 
the form of an integrated circuit (for example the compo- 
nent PEB2445 by Siemens). 

If the handset MT is provided, it Is connected, via its 
40 cord 4, to an appropriate connector CM connected to 
the block PIC through a PCM line. 

The devices CK are tasked with generating and 
controlling the synchronisation and timing signals 
required for the operation of the devices SW, TA, IF, IR. 
45 \LS, and they obtain such signals either from an internal 
oscillator or from an external generator. The require- 
ments of the individual devices are descrbed in the data 
sheets of the components they comprise, to which refer- 
ence can be made. CK is also tasked with checking for 
50 the presence of the synchronism signal of the lOM-2 
bus (by generating an interrupt towards MP in case of 
malfunction), with generating an interrupt each multi- 
frame of the interface lU (12 ms) to allow the transmis- 
sion, by the programme, of appropriate synchronism 
55 signals to the base stations, and lastly with checking the 
correct operation of the programme itself by means of a 
watch-dog check. 

The devices ILS for managing the connection with 
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the personal computer PC (Figure 1 ) r other peripheral 
unit comprise a conventional serial RS232 interface to 
which in the preferred emtxxiiment two bi-directional 
channels are connected. ILS can be for instance com- 
ponent SAB82532 by Siemens. s 

Lastly the microprocessor MP, which contains the 
programnr>es required for conducting the tests, is a con- 
ventional commercial microprocessor, for instance the 
microprocessor 89C186XL by Intel. 

The emulator EM described above is physically io 
constructed by means of six printed circuit boards in the 
format known as "double Europe" (220x233 mm), 
besides the two boards which constitute the front and 
rear panels of a rack on which the six aforesaid boards 
are mounted. In particular, the following arrangement is is 
provided: 

one board for the interfaces IS and one for the inter- 
faces lU; 

one board for the devices for remote power supply 20 
to the telephones TF and one for those of the radio 
stations RFP; 

one board for the microprocessor MP, the switching 
devices SW. the controllers HDU, HDS and the 
interface ILS; 2s 
one board for the timing devices CK and the audio 
transcoding devices TA. 

Thus it can immediately be seen that the need to 
have a portable structure is fully met 30 

For the sake of simptidty. the drawings do not show 
the devices for supplying electrical power to the appara- 
tus. 

A novel feature of the present invention is the oper- 
ating system mourrted on the microprocessor MP. This 35 
operating system allows managing concurrent parallel 
processes, as well as managing the information flow 
among the processes themselves for its display and 
storage on the personal computer PC: this allows for an 
analysis of the correctness of the information exchange. 40 
The operating system adopted allows obtaining good 
performarrce in real time and makes it possible to record 
the calls to the different functions for Implementing the 
SDL state diagrams (primitives transmission/reception, 
time count start/stop, etc.). 45 

For ease of understanding of the description that 
follows, it is deemed appropriate to provkie the following 
definitions: 

process: it is a part of programme which inrtple- so 
ments certain functions (or entities) provided by the 
DECT protocol (e. g. call control, mobility manage- 
ment, exchange of messages between protocol lev- 
els) or by the other communication protocols; 
SDL diagram: it is the graphic representation of a ss 
process; SDL (Specification and Description Lan- 
guage) is a standard way of describing the opera- 
tion of a telecommunications system; 



primitive: it is the instrument used to exchange 
information between protocol entities of different 
hierarchical levels; in tinis regard, it should be 
remembered that the messages (which concern the 
communication between homologous levels of the 
fixed portion and of the mobile portion of the sys- 
tem) are actually dispatched by means of primitives 
which propagate from the level of origin to the phys- 
ical level and then go up. in the receiving portion, 
from the physical level to the destination level. 

Rgure 3 shows, for the sake of description clarity, a 
possible structure of the communication protocols 
between the emulator and the different devices con- 
nected thereto. These protocols are well known and the 
functions they perform (and thus the processes imple- 
mented in the emulator) do not require a more detailed 
description than the one provided farther on. That 
description will also provide an explanation of the acro- 
nyms appearing in the drawing, which also are well 
known to the technician. 

Rgures 4A. 4B show a f bwchart of the overall oper- 
ations of the emulator. 

The first operation the operating system performs 
upon starting the device is tiie activation of the RS232 
serial connection between PC and EM, i. e. the creation 
of the data transmission and reception processes on the 
connection itself. 

Subsequently the operating system creates tiie 
processes pertaining to the management of the level 2 
arxj 3 protocols of the connections with the ISDN tele- 
phones, of the process for the IOM-2 interface supervi- 
sion and of the LLME (Lower Level Management Entity) 
process, which in turn shall create the other processes 
pertaining to the DECT protocol. The creation of tfiese 
processes is managed by the function "Main" which, as 
the name says, is the main function of the system. At 
tills point the emulator is in its active state. 

Upon its creation, a process is assigned a memory 
amount sufficient to contain the stack area, the global 
variables and a "local" memory area mainly utilised to 
house the queue of primitives awaiting processing. The 
maximum dimensions of these areas are specified at 
the moment tiie function tasked witti creating the proc- 
esses ("Create Task" function) is called up. Note that the 
operating system allows the creation of only those proc- 
esses whose main characteristics (address of the corre- 
sponding function, stack dimensions, etc.) are stored in 
a data base residing on an EPROM memory. To create 
a process of a type not yet foreseen, it is therefore nec- 
essary to modify the operating system itself as well. 

All the processes created are inserted into a list 
(queue) which is cyclically read by the operating sys- 
tem. A process being examined (for instance the first 
one. as indicated by PROCESSJD = 1 in tiie diagram 
shown in the Figures 4A, 4B) obtains control of the CPU 
of internal controller MP if the process itself is not sus- 
pended and if it has at least one primitive queued 
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thereto. Once the process has obtained the control, the 
process shall call up the operating system functions 
indicated by the commands received (fl. f2 ...), and 
shall carry out the required actions {AZ1. AZ2 ...). Con- 
trol then returns to the operating system for examining 
the next process. The procedure adopted for all proc- 
esses therefore is the following: 

1) When the process obtains control of the CPU. 
the first primitive is immediately read from the 
queue ("Wait Message** function). If the queue is 
empty, the "Wait Message" function immediately 
returns control of the CPU to the operating system 
and the process shall obtain control again only 
when at least one primitive is queued to it. 

2) The primitive is then analysed. 

3) Once the actions required by the message con- 
tained in the primitive have been accomplished, if 
no additional processing is required the primitive is 
eliminated from the queue ("Free Message" func- 
tion). If instead subsequent processing is required, 
the primitive is inserted into an appropriate list 
("Save Message" function). The primitives present 
in this list shall be reinserted into the main queue at 
the moment the SDL state changes. 

4) The process sun-enders cofntrol of the CPU to the 
operating system ("Scheduler" function). Note that 
in order to guarantee a reasonable sharing of the 
processing times among the various processes, the 
criterion selected is to analyse a single primitive at 
a time for each process: in the absence of the call- 
up to the "Scheduler" function, the process would 
take place regularly but it would maintain control of 
the CPU until the complete clearing of the queue of 
primitives: should these be numerous, the other 
processes would remain inactive for a period whose 
duration could be excessive. 

The general procedure described above is also 
shown in the state diagram of Figure 5. 

The IDLE state is maintained by the process in the 
absence of queued primitives whilst the READY state is 
reached as soon as the process itself receives at least 
one primitive that pertains to it ("Post Message" func- 
tion) so that it is able to obtain control of the CPU at the 
appropriate moment. The ACTIVE state is the one in 
which the process has obtained control of the CPU: the 
diagram clearly shows the return to the READY state 
and to the IDLE state after the analysis of each primitive 
("Scheduler" function) and respectively when the primi- 
tive queue has been cleared ("Wait Message'O. 

Two additional states, which can be reached from 
the ACTIVE state, are provided for. The first one is a 
PROCESS SUSPENDED state, wherein the process 
remains for a time which is indicated in the message 
that caused the suspension itself: once the time has 
elapsed, the process returns to the ACTIVE state. The 
presence of this state allows dispensing with dedicating 
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CPU time to a process which needs to be called up only 
sporadically or which is in a phase followed by a period 
of inactivity of the process itself. The second one is a 
PROCESS DEACTIVATED state, which is reached for 

5 instance because a certain action is required (for 
instance transmission of an HDLC frame) by the con- 
trollers HD1 , HD2 (Figure 2). The system returns to the 
ACTIVE state also from this state, once the controller 
involved has performed the required operation. 

10 The operating system also provides a support to 
the management of the SDL states in order to make it 
possible to record state changes. To this end, the func- 
tions "Set State", which changes the state, and "Get 
State", which allows reading the current state, are pro- 

15 vided. 

As was seen with regard to the suspension, during 
the execution of the various processes, counting of the 
time elapsing between two events or of the time elapsed 
after the occurrence of an event may be required: to this 

20 end, timers integrated in the component embodying MP 
are used and the operating system includes functions 
("Set Timer"; "Kill Timer") for starting and respectively 
stopping such counting. 

Through the user interface (implemented on the 

25 personal computer PC. Figure 1 , e. g. in WINDOWS® 
environment) it is possible to programme the operating 
system in such a way as to record the calls to the func- 
tions related to the management of the processes, of 
the primitives, of the time counts. The data are stored 

30 into a RAM area known as "tracing buffer memory" 
which can be read at the operator's request. In this case 
the content of this memory is transferred, via a serial 
connection, to PC where it is decoded and subse- 
quently displayed on a video screen (in the form of an 

35 SDL diagram). However, it should be k^t in mind that 
activation of the event recording entails an inevitable 
degradation in the real-time performance of the pro- 
gramme. 

A list of tiie functions of the operating system, 
40 adopted to implement the SDL state diagranns, is 
reported below; providing some additional details: 

A) Create Task 

45 As Stated above, this is the function creating a proc- 
ess; when this function is called up. the operating sys- 
tem must provide as parameters a first pointer 
(IpszTask) which identifies the string containing the 
name of the process type (for instance "LLME"), and a 

so second pointer (tplms) which allows access to informa- 
tion defining the structure and the maximum dimensions 
of the memory area reserved for the process indicated 
by IpszTask. Note that multiple "instances" can be cre- 
ated for each type of process, since the tests to be per- 

55 formed can concern multiple events of the same kind 
(the simplest example is that multiple simultaneous calls 
can be in progress). The function provides the operating 
system with a value 0 if its outcome is negative (for 
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instance the name of the process is unknown or the 
required memory is not available), othenwise the value 
provided is the identity of the process created. 

B) Destroy Task 

When this function is called up. the operating sys- 
tem must provide as a parameter the identity (idTask) of 
the process whose destruction is required. Note that a 
process may request its own destruction. This function 
replies with a value 1 if the process indicated by idTask 
has been destroyed. Otherwise (for example if the proc- 
ess does not exist) the value provided is 0. 

C) Post Message 

This function relates to the exchange of messages 
between processes. Taking into account that, as stated, 
the exchange of messages takes place through the 
transmittal of primitives, the parameters required for the 
execution of this function are: 



the primitive. The "Free Message" function returns no 
value to the operating system. 

F) Save Message 

5 

This function extracts the first primitive from the list 
of primitives awaiting processing associated to the call- 
ing process and queues it to a list which shall in turn be 
inserted again at the head of the queue of primitives 
10 awaiting processing when the "Restore All Messages" 
function is called up or when the SOL state of the proc- 
ess is modified through the "Set State" function. This 
function also returns no value to the operating system. 

IS G\ Restore All Messages 

This function inserts again at the head of the queue 
of primitives awaiting processing by the calling process 
the primitives previously extracted through the "Save 
20 Message" function. The "Restore All Messages" func- 
tion returns no value. 



idDest. which is the identity of the process to which 
a primitive is sent (i. e. queued in the list awaiting 
processing); 

kjPrim, which is the name of the primitive to be 
transmitted, and npParam, which is the pointer to a 
memory area containing the parameters associ- 
ated to the primitive identified by id Prim. Note that 
the pointer must address a memory area actually 
assigned to the process which has called up the 
function; 

IpMess, which is the pointer to the message con- 
veyed by the primitive. If its value is NULL, then the 
primitive has no message. 

The value returned is 0 if it was not possible to queue 
the primitive to the destination process (for example 
idDest specifies a non-existing process). 

D) Wait Message 

This function retrieves the first primitive awaiting 
processing queued to the process. As stated, if this 
function is called up when the queue is empty, then the 
control of the CPU returns to the operating system. The 
function provides the operating system with the pointer 
relevant to the primitive read (Its value can never be 
NULL). 

E) Free Message 

This function extracts the first primitive from the 
queue of primitives awaiting processing associated to 
the calling process 0- e. the one holding control of the 
CPU), freeing the resources assigned to this primitive 
and deleting its information content. Generally, this 
function is called up at the completion of the analysis of 



Set Timer 

25 This function activates the time countings; it 
requires the following parameters: 



nTimer, which gives the identity of the virtual timer 

whose activation Is required; 

nDelay. which indicates how many tune units must 

elapse before expiration of the time set; 

nClocK which indicates the duration of a time unit: 

for example. 1 millisecond, 10 milliseconds or 1 

second can be used as nClock values. 



30 



35 



The value provided to the operating system by this func- 
tion is the identity of the timer activated, if the outcome 
is positive. Otherwise the function yields a value 0 (cor- 
responding to an invalid timer identity). Upon expiration 
40 of the time set by nt)elay and nClock, a primitive 
TIME_OUT is queued to the calling process. The 
parameters associated with this primitive include also 
the identity of the timer activated by this function. 

45 I) Kill Timer 

This function is opposite to the previous one and 
causes stopping the count by the timer whose identity 
idTimer is provided by a previous call-up to the "Set 
50 Timer" function. The "Kill Timer" function at the end 
always provides a value 0 in order to invalidate the vari- 
able containing the identity of the slopped timer. 



55 



L) Set State 

This function causes the calling process to pass to 
a state indicated by a parameter nStateSDL. Obviously, 
the function performs no operation if the process is 
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already in this state. In case of a state change, the prim- 
itives which may have been extracted by a previous call- 
up to the "Save Message** function are inserted again at 
the head of the queue of primitives awaiting processing. 

M) Get State. Get Cunrent Task. Get Parent 

These functions provide the operating system 
respectively with the value of the SDL state the calling 
process is in, the calling process identity and the identity 
of the process which has created the calling process. In 
regard to the last function, if the calling process has 
been created by the operating system during the pro- 
gramme initialisation phase (such as the processes for 
managing the connection with the personal computer) 
or by the "Main" function (such as the LLME process), 
the value returned is 0. 

N) L-Alloc 

This function allocates a memory area, destined for 
the storage of a number of bytes, specified by a nDim 
parameter, within the area assigned to the calling proc- 
ess. The dimensions of that area were in turn specified 
at the time tiie process was created. This area is in turn 
subdivided into lists of blocks of different dimensions 
(for example 6 lists of blocks with dimensions from 16 to 
512 bytes): the function initiates the search for a free 
memory block starting from the list of available blocks 
having the minimum dimensions required in order to 
contain nDim bytes and, if the list is found enrtpty. the 
function continues the search among the list of blocks 
with immediately larger dimensions. The value returned 
is the pointer to the memory area allocated, or 0 (NULL) 
if memory allocation cannot be performed. 

The DECT processes implemented by the emulator 
in tiie course of a test related to the specific DECT sys- 
tem considered by way of example shall now be 
reviewed, providing some details. 

RX RS232 Process 

This process, created automatically by the operat- 
ing system upon the programme activation, manages 
the reception of data from the personal computer PC 
(Figure 2). Through a memory area updated by the 
driver managing the interface ILS, Figure 2. tiie process 
detects the presence of data and immediately activates 
their processing. The latter consists in recognising the 
start of a message (SOT character) and then in storing 
all the information content until the reception of the end 
of message character EOT. If the modulo-256 sum of 
these data (checksum) has a pre-set value (in particu- 
lar, zero), the message received is considered valid; 
otherwise, the message is discarded: The type of each 
message is determined according to the coding of the 
first character of the data area. The process then veri- 
fies whether the function of the message received actu- 



ally pertains to the execution of the tests and, if it does, 
a primitive with the information received is created and 
transmitted towards the process involved (the message 
type allows identifying univocally the destination proc- 

5 ess). If instead the data received pertain to functions 
such as event recording or to the general operating 
parameters of the machine, tiie process immediately 
provides for tiieir processing. Therefore, this is the proc- 
ess which performs most of the operations the operator 

10 activates through PC (Figure 2). The operations relating 
to this process are also shown in the diagram in Figure 
6. The diagram is self-explanatory and requires no spe- 
cific comments. Note that, in addition to what has been 
stated above, the diagram also indicates the emission 

75 and reception of the commands for suspending and 
resuming a transmission (XOFF, XON characters) 
which commands can be exchanged between EM and 
PC when one of tiie two units is not able or respectively 
is again able to receive additional data (typical example, 

20 the reception buffer is nearly full). 

TX RS232 Process 

This process is created (together with RX_RS232) 
25 at the end of the programme Initialisation procedure. It 
manages the transmission of the messages on the line 
3. Such transmission Is activated by writing the informa- 
tion to be transmitted (DATA), preceded by tine SOT 
character and followed by EOT, into a data area shared 
30 with the driver of the Interface ILS. The character that 
precedes EOT Is set to such a value that the sum of the 
data has the pre-set value. The operations related to 
this process are also shown in the diagram in Figure 7. 
The diagram is self-explanatory and requires no partic- 
35 ular comments. 

LAPD U Process. 

This process manages alt level 2 (Channel D 
40 access control procedures or LAPD, Link Access Proce- 
dure - D) and level 1 (physical level) functions related to 
the connection of the emulator with the radio station 
being tested. Level 2 is wholly in compliance with ITU-T 
recommendation Q.921 , and tine main parameters (time 
45 count duration, transmission window dimension, etc.) 
can be set by the operator. Level 1 manages the proce- 
dure for the activation and control of the U interface 
according to ETSI standard DTR/TM-3002, to which ref- 
erence is made for a detailed description since the oper- 
50 ations candied out by the emulator to implement this 
process are wholly in accordance with the standard 
Itself. The programme creates four instances of this 
process so that all four U interfaces can be managed 
simultaneously. 

55 

LAPD S Process 

This process manages the level 2 and level 1 proce- 
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dures cf the connection with the ISDN telephones used 
to test the radio station concerned. Level 2 Is in compli- 
ance with ITU-T recommendation Q.921 mentioned 
above, whilst level 1 manages the activation and control 
of the S interface as provided for by ITU-T recommen- 
dation 1.430. Since all operations performed by the 
emulator to Inplement this process are fully in accord- 
ance with the recommendations mentioned, reference 
is made thereto tor a detailed description. The pro- 
gramme creates eight Instances of the process in order 
to be able to simultaneously manage alt eight S inter- 
faces available. 

U3 g Prpqegg 

This process manages the level 3 procedures of the 
ISDN telephones In accordance with ITU-T recommen- 
dation Q.931 . to which reference is made for a detailed 
description. Note however that only those functions 
which allow managing a call have been implemented, 
the other functions not being of interest in the applica- 
tion envisaged for the invention. Eight instances of this 
process are also created, in order to simultaneously 
manage ail eight available S interfacea 

DELAY Process 

This process Is used only for the purpose of check- 
ing the programme and it inserts a delay in the transmis- 
sion of a primitive. In practice the process which 
originates the primitive does not send it directly to the 
addressee but queues It to this process, which stores 
the primitive and forwards It to the addressee only upon 
expiration of a time interval specified as a parameter 
associated to the primitive itself. 

IOM-2 Process 

This process manages the transmission on the 
monitoring channel of the two IOM-2 interfacea This 
channel is used by the levels 1 of the 8 and U interfaces 
to send sa-vice information to and receive service infor- 
mation from the respective peripheral units. This opera- 
tion (which could be performed directly by the levels 1) 
is entrusted to this process for the sole purpose of 
Improving the real time performance of the programme. 

O&M (Operation and Maintenarx;e) Process 

This process is tasked with the activatioa initialisa- 
tion, remote power supply and start-up of the base sta- 
tion or stations being tested. The procedures according 
to which these operations are performed are specific for 
the type of station and they vary from one manufacturer 
to another. The operator managing the test shall have to 
load them into the system. 



INTERWORKING UNIT f IWU) Process 

This process manages all procedures allowing 
intenn/orking between the level 3 processes relating to 
5 the DECT radio interface and those relating to the ISDN 
interface, by keeping the data base containing the Infor- 
mation about the different calls updated. Interworking 
procedures too are defined by the respective standards, 
to which reference is made. 

10 

CALL CONTROL (QQ Prpgggg 

This process manages level 3 procedures (network 
level, indicated as NWK in Figure 3) which allow setting 
15 up, maintaining and releasing circuit-switched services, 
and it provides a support for all signalling related to a 
call. Each instance of this process is associated to a 
connection service of the User plane (plane U) man- 
aged by the LLME process. 

20 

MOBILITY MANAGEMENT (MM) Process 

This process manages all level 3 procedures nec- 
essary to guarantee security in the provision of DECT 
25 services. These procedures become necessary due to 
the mobile nature of the DECT user and they are also 
used to prevent the illegal connection to the radio inter- 
face. The procedures carried out are subdivided as fol- 
lows: 

30 

Authentication procedures. 1. e. the procedures 
used in both the mobile and the fixed part to verify 
the correctness of the identity received; 
Registration procedures, i. e. the procedures used 

35 by a mobile unit, for instance when the terminal is 
switched on, to indicate to the fixed part its position 
in terms of localisation area and to inform the fixed 
part of its availability to receive and make calls; 
Subscription procedures, i. e. the procedures used 

40 by a mobile terminal to obtain access rights to a 
fixed part; 

Cryptography procedures. 

These procedures too are obviously wholly in accord- 
45 ance with the provisions of the DECT standard, to which 
reference is made for more details. 

LINK CONTROL ENTITY f LCE) Process 

50 This process manages all level 3 procedures nec- 
essary for setting up. managing and releasing a DLC 
(Data Link Control) connection of plane C (control 
plane) between fixed and mobile parts by coordinating 
the use of DLC level resources, including management 

55 of the broadcast services. 
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DATA LINK CONTROL (PLC) Processes 

These processes manage all level 2+ (DLC) proce- 
dures capable of creating and maintaining in a reliable 
manner the DLC connections of plane C between the 
fixed and mobile part. Their purpose is to generate 
more reliable connections by providing a higher degree 
of data integrity at level 3. by making use of MAC 
(Medium Access Control) connections wherein a part of 
the errors of the radio transmission have already been 
removed. For plane U, the process provides the trans- 
parent transmission used for voice connections at 32 
kbit/s and allows the handover In particular, this proc- 
ess allows providing two independent services: 

point-to-point connection service accomplished by 

the LAPC and Lc processes; 

broadcast service accomplished by the Lb process. 

LAPC Process 

This process realises a level 2 protocol derived 
from the ISDN LAPD protocol and it can manage 
the transport of information with and without 
acknowledgement perform the segmentation and 
re-composition of packets of the NWK level, as well 
as control their flow and sequence. 
Lc Process 

This process stores the LAPC packets and 
divides them into fragments of suitable size for the 
MAC level (and vice versa), recognises transmis- 
sion errors on the complete LAPC packet, manages 
handover control, allocates the transmission 
resources provided by the MAC level and revokes 
their allocation according to the requests arriving 
from entities at the NWK level. 
Ub Process 

This process manages a broadcast service 
which allows mainly the transmission of paging 
information. 

LOWER LAYER MANAGEMENT ENTITY TLLME) Proc- 
ess 

The task of this process is, as previously stated, to 
create all other processes related to the DECT protocol 
and therefore it performs all coordination and control 
activities involving processes at different levels (NWK, 
DLC and MAC) by maintaining a data base containing 
information on the various process instances which are 
created/removed updated. It also provides a translation 
of the primitives coming from the LAPD processes into 
the corresponding MAC primitives which are used by 
the DLC level DECT processes (and vice versa). 

The execution of a test with the apparatus 
described shall now be reviewed in a more detailed way. 

Through the personal computer PC (Figure 1), the 
operator activates first the serial connection with the 
emulator EM by setting the parameters of that connec- 



tion (bit rate, type of parity, stop bits, etc.) and then, if 
necessary, he/she reloads the programme of the micro- 
processor MP (Rgure 2). 

In the subsequent step, the connectior^ with the 

5 terminals TF1 ... TFn and the base stations RFP1 ... 
RFPh are activated. Alternatively or in addition to the 
connection with the terminals, the connection with the 
handset MT can be activated. In case of connection to 
the ISDN terminals, the operator can programme the 

10 channel of the ISDN frame to be used for voice and can 
associate appropriate indicators to each terminal. For 
connection to the base stations, the operator shall have 
to programme the overall number of loops for connec- 
tion to the network and the number of voice channels 

IS the station can handle at the same time (e. g. 2 or 4 
loops and 4 or 8 channels); additionally, according to 
the type of station, the operator shall set up the alloca- 
tion of the loops to power supply and voice. In this 
phase, the operator will be able to reload the respective 

20 programme into the base stations (the transfer takes 
place in two phases, first from PC to EM and then from 
EM to RFP); thus, the remote loading of the pro- 
grammes themselves is also tested. The test manage- 
ment programmes allow, as stated, the individual 

25 activation and deactivation of the devices connected to 
the emulator and thus the test configuration adopted 
can be varied at will according to the specific require- 
ments (e. g. test on a single call or on multiple simulta- 
neous calls). 

30 During the activation of the connection with the 
radio stations, the operator may specify additional 
parameters, including system parameters (e. g. the 
identity of the system, the Radio Path Number and other 
parameters which the system has to broadcast periodi- 

35 cally to all mobile terminals, in accordance with the pro- 
visions of the standard), parameters more directly 
connected to the test equipment (programme loading 
modes, location of the files pertaining to the programme 
of the radio station, etc.). and parameters relating to the 

40 radio station, such as the maintenance parameters (for 
example, coding of the station alarms and states) and 
radio parameters (maximum and minimum power 
thresholds, interference situation on the channels, etc.). 
At this point the radio station can actually be acti- 

45 vated for the test, which in the most general case con- 
sists of the execution of one or more calls: in fact, during 
a call, all the operating system processes and functions 
seen above are involved. It will be possible to test com- 
munications between mobile and fixed terminals or 

so among nriobile terminals, controlled by the same base 
station or by different base stations, if multiple base sta- 
tion are connected to the emulator. In the latter case, 
the conditions corresponding to the passage of a mobile 
terminal from one cell to another can also be simulated 

55 during the test. During the test set-up. the operator may 
specify whether the communication is to take place in 
dear or is to be encrypted. Moreover, an automatic test 
procedure may be selected, wherein all envisaged oper- 
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ations are performed by the apparatus in a pre-set 
sequence, or a step by step procedure may be selected, 
wherein the operator indicates the step to be performed 
and obtains an acknowledgement from the apparatus 
each time. In the most general case, the automatic pro- s 
cedure will be chosen, unless the operator desires a 
check of individual operations or of a specific part of the 
test (e. g. authentkiation. recording ...). Moreover, the 
operator shall programme the monitoring modes and 
shall specify the type of information to be obtained: in w 
particular, display can take place in the form of SDL dia- 
grams or arrow diagrams, with time indications of the 
events which took place, and information can be 
obtained on the protocol entities involved, on the con- 
tent of the messages etc. The collected data can then 75 
be stored in a file. 

It is evident that what has been described is pro- 
vided solely by way of non limiting example and that var- 
iations and modifications are possible without thereby 
departing from the scope of the invention. Thus, for 20 
example, the interfaces towards the ISDN network and 
the base stations can differ from the U and S (SDN inter- 
faces mentioned above. Additionally, since the DECT 
system can allow radio access to networks other than 
the ISDN network, such as conventional telephone net- 25 
works, packet switching networks, local area networks, 
mobile communications networks etc., which require 
other communications protocols than the ISDN proto- 
col, the interfaces IS can be replaced by specific inter- 
faces for the terminals of the different network types, for 30 
example interfaces operating according to the protocols 
set out by CCITT recommendation G703, with 32-chan- 
nel frames and a gross bit rate of 2 Mbit/s. The replace- 
ment of the components indicated previously with 
others capable of operating with another type of proto- 35 
col is anyway hot a problem for the person skilled in the 
art, since specific commercial components exist for the 
different internationally standardised protocols. 

Claims 40 

1. Apparatus for testing base stations (RFP1 ... RFPh) 
and mobile terminals (TM1 ... TMk) of personal 
communications systems of the type wherein the 
base stations (RFP1 ... RFPh) provide the mobile 4S 
terminals (TT^I ... TMk) with radio access to a tele- 
communications network, characterised in that the 
apparatus itself constitutes an autonomous struc- 
ture capable of emulating a switching exchange 
featuring radio access, and comprises: so 

first interface and management devices (IR. IF; 
HD) for connecting the test apparatus (EM) to a 
plurality of the base stations (RFP1 ... RFPh) 
and of terminals (TF1 ... TFn) of the telecom- 55 
munications network and for managing the 
respective connections; 
switching devices (SW). connected to said first 



interfac and management devices (IR. IF, 
HD). for switching test communications coining 
from the personal communications system or 
directed thereto; 

second interface and management devices 
(ILS) for connecting the apparatus to an exter- 
nal control device (PC) and managing said 
connection; 

an internal control device (MP), presenting a 
bus connected to means (HD) that in the first 
interface and management devices are tasked 
with managing the connections between the 
apparatus and the base stations (RFP1 ... 
RFPh) and the network terminals (TF1 ... TFn), 
to the switching devices (SW). and to the sec- 
ond Interface and management devices (ILS). 
and storing the programmes necessary for exe- 
cuting functional tests, traffic tests and tests of 
interworking with the mobile terminals and pre- 
senting an operating system which creates the 
processes required by the tests, nonages 
them for the execution of the tests on a plurality 
of simultaneous communications and nranages 
the information flow among the processes 
themselves for the display and storage into the 
external control device of information about the 
development of the tests: 
the external control device (PC), which pro- 
vides the internal control device (MP) with 
information aboxn the specific type of base sta- 
tion and/or terminal connected to the appara- 
tus and with test parameters, programmes the 
test procedures and supervises the execution 
of the tests. 

2. Apparatus as claimed in claim 1. characterised in 
that it also comprises devices (CK) for generating 
and controlling the synchronisation and timing of 
the operations of the apparatus and for checking 
the correct operafion of the programmes of the 
internal control device (MP). 

3. Apparatus as claimed in claim 1 or 2. characterised 
in that the first interface and management devices 
(IR. IF. HD) comprise, for the connection to the base 
stations (RFP1 ... RFPh) and to the terminals (TF1 
... TFn) of the telecommunications network: 

a radio interface (IR). comprising means (lU) 
for managing the physical level of the commu- 
nication protocols required for access to the 
network, and means (PW1) for remote power 
supply of the base stations (RFP1 ... RFPh); 
arxi 

a network interface (IF), comprising means (IS) 
for mar^ging the phrysical level of the commu- 
nication protocols required for communication 
with the tenninals (TF1 ... TFn) of the telecom- 
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munications network and means (PW2) for 
remote power supply of the terminals (TF1 ... 
TFn) of the telecommunications network; 

the means (ID, IS) for managing the physical levels s 
of the communication protocols in said interfaces 
(IR. IF) being associated to respective units (HDU, 
HDS) of the connection management devices (HD). 
destined to manage the signalling. 

10 

4. Apparatus as claimed in daim 3. characterised in 
that said interfaces (IR. IF) comprise one of said 
means (lU. IS) for managing the physical level of 
the protocol and one of said remote power supply 
means (PW1 , PW2) for each of the base stations is 
(RFP1 ... RFPh) and respectively of the network 
terminals (TF1 ... TFn) which can be connected to 
the apparatus, the physical level management and 
remote power supply means being able to be acti- 
vated and deactivated individually by an operator. 20 
through the external control device (PC). 

5. Apparatus as claimed in any of claims 1 to 4, char- 
acterised in that said switching devices (SW) also 
comprise means (PIC) for controlling connection 25 
lines between the devices themselves and the inter- 
faces (IR, IF). 

6. Apparatus as claimed in any of claims 1 to 5. char- 
acterised in that the switching devices (SW) also 30 
comprise means (DSC) for combining the voice sig- 
nals relating to multiple communications for tests on 
base stations and mobile terminals of a personal 
communications system providing for a conference 
service. -35 

7. Apparatus as claimed in any of claims 1 to 6, char- 
acterised in that said base stations (RFPI ... RFPh) 
are the base stations of a system operating in 
accordance with the DECT standard. 40 

8. Apparatus as claimed in any of claims 1 to 7, char- 
acterised in that said terminals (TF1 ... TFn) of the 
telecommunications network are ISDN terminals. 

4S 

9. Apparatus as claimed in any of the previous claims, 
characterised in that it also comprises devices (TA) 
associated with the switching devices (SW), for 
voice trans-coding from the format used in the per- 
sonal communications system into the one required so 
by the terminals (TF1 ... TFn) of the telecommuni- 
cations networK and vice versa. 

10. Apparatus as claimed in any of the previous claims, 
characterised in that the constituent devices are ss 
integrated circuit components which can be 
mounted on a limited number of printed circuit 
boards, for the embodiment of the apparatus itself 



in the form of a portable apparatus for field tests. 

11. Apparatus as claimed in claim 10. characterised in 
that it also comprises means (CM) for connecting 
the switching devices (SW) to a handset (MT). 
whose dialling devices are simulated on the exter- 
nal control device (PC). 

12. Apparatus as claimed in claim 11. characterised in 
that the connection between the handset (MT) and 
the apparatus (EM) can be activated by the external 
control device (PC) in alternative or in addition to 
the connections with the network terminals (TF1 ... 
TFn). 

1 3. Apparatus as claimed in any of the previous claims, 
characterised in that said operating system, when 
the apparatus is started, acts so as to: 

create data transmission and reception proc- 
esses on the connection between the appara- 
tus and the external control device; 
create processes related to the management of 
levels 2 and 3 of the communication protocols 
pertaining to the connections with the terminals 
(TF1 ... TFn) of the telecommunications net- 
work; 

create a process for supervising the communi- 
cation between said radio and network inter- 
faces (IR. IF) and the respective signalling 
management units (HDU, HDS); 
create a process (LLME) tasked with perform- 
ing, within the personal communications sys- 
tem protocol, the co-ordination and control 
activities involving functions of different levels 
and, through this process, create the other 
processes relating to the functions provided by 
the communication system. 

14. Apparatus as claimed Fn claim 13, characterised in 
that said operating system is capable of performing 
a cyclic reading of the identity of the processes cre- 
ated and of assigning control of the internal control 
device (MP) to a process which is not suspended 
and has actions to be performed, indicated by prim- 
itives queued In a memory area assigned to the 
process itself. 

15. Apparatus as claimed in claim 14. characterised in 
that, for each primitive relating to a process, the fol- 
lowing operations are performed: 

a) reading the primitive from the queue when 
the process obtains control of the processing 
unit; 

b) analysing the primitive: 

c) carrying out the actions required l>y the mes- 
sage contained in the primitive; 
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d1) if subsequent processing of the primitive is 
not required, deleting the primitive from the 
queue: 

d2) if subsequent processing of the primitive is 
required, inserting the primitive into a waiting s 
list, and inserting it again into the main queue 
at the moment the process changes state. 

16. Apparatus as claimed in claim 14 or 15, character- 
ised in that, after handling a primitive relating to a io 
process, said operating system is able to assign 
control of the processing unit to the next process 
having primitives to be handled. 
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